$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: pEvvvHNSfToBvoyeHJduqfkjuQZR3oZmaZd3x+Hq4x8= Subject key identifier: F6:88:CF:55:03:96:FE:FA:E4:29:1F:11:80:1D:6E:63:20:12:E6:9F Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 5F5054083B69B9A9B3DB462FD7FACAB6E4145F8F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 9C Signing time: Mon 20 Oct 2025 04:50:16 +0000 Manifest this update: Mon 20 Oct 2025 04:45:16 +0000 Manifest next update: Tue 21 Oct 2025 05:50:16 +0000 Files and hashes: 1: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: 85JRReUDNqAIMROyElI+AcqPJPRY3q/czyqB5/j4F58=) 2: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 3: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 4: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 5: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 6: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 7: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) 8: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 9: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 10: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 11: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 12: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 13: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 14: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 15: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 16: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 17: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 05:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:50:54:08:3b:69:b9:a9:b3:db:46:2f:d7:fa:ca:b6:e4:14:5f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Oct 20 04:45:16 2025 GMT Not After : Oct 21 05:50:16 2025 GMT Subject: CN=F688CF550396FEFAE4291F11801D6E632012E69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:b8:8b:b1:7f:33:d4:99:40:b6:45:02:2e: ed:4f:af:6b:b9:2d:f7:e3:d9:86:f3:c9:7c:85:bb: 6f:7a:dd:ff:05:b5:ee:f1:9e:82:c8:3a:6f:05:2d: c3:a6:6e:99:44:07:f3:dd:d3:67:a0:45:f2:6d:ce: 1d:67:33:1f:8a:b1:35:30:4c:23:57:5b:22:02:c3: fa:a6:07:1d:3b:b0:63:11:6c:c7:c1:43:f3:4b:3d: f4:a8:c6:3c:41:a9:62:ee:07:c5:c2:8d:65:a0:40: 1c:16:6b:eb:3a:92:58:97:11:f8:0b:06:49:4a:4f: bc:81:22:f7:40:bb:83:e8:eb:04:03:e5:34:9f:7d: 51:02:eb:d2:f2:7e:32:7d:f8:af:3b:47:bb:cc:c7: 39:ab:69:8d:55:4f:a6:7d:c7:b7:4f:11:bb:59:78: 85:c0:df:96:9d:1f:23:6d:9d:bc:14:ec:d3:cc:5f: 73:cc:5e:85:1f:26:48:b3:4a:a0:da:ad:bf:3d:a9: 84:ec:61:61:86:06:b1:f9:bd:aa:12:62:02:26:e7: cd:8a:88:6a:47:91:ed:5e:07:cd:55:b6:e4:9b:c0: 9d:e9:f1:f8:25:f7:53:2c:73:bb:f6:39:2b:6a:00: 22:4c:8e:18:d0:e4:6e:84:07:de:39:b4:8e:54:48: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:88:CF:55:03:96:FE:FA:E4:29:1F:11:80:1D:6E:63:20:12:E6:9F X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:47:e4:de:90:63:53:d6:bb:a2:74:8a:6c:b8:b2:4c:e3:1a: 62:ca:72:47:c9:90:eb:49:56:b7:cf:ab:25:79:fd:72:29:89: 91:65:aa:3a:67:d2:1a:36:f5:20:ef:31:75:10:4b:a6:6b:43: ee:f5:4f:c3:d5:54:1f:b3:40:80:0d:a9:4d:73:57:e0:68:c2: e5:f3:c8:71:86:b6:20:ce:29:c2:1e:9f:e8:45:af:93:96:80: 4a:e7:50:ba:52:72:c0:91:89:48:1f:4a:db:0f:47:30:65:34: 9d:12:b3:ab:4b:c4:66:28:89:90:db:e4:af:3f:c2:d5:42:10: 6c:d9:e9:89:e6:a3:dd:30:c1:e0:7f:b0:a6:46:0c:64:68:7a: cb:36:32:38:d7:6c:d9:c7:c6:d4:1b:5c:06:b1:51:4d:fd:c8: b7:1e:e7:65:30:b0:e0:aa:67:bf:e0:da:2f:cb:c3:21:fd:7c: 1b:9a:8b:73:42:dc:ca:30:9f:8a:ec:31:92:fe:2b:f5:f7:2b: ea:24:bc:a6:d9:3a:7d:d9:99:ec:de:b7:fc:1a:64:69:6b:05: 26:5a:d5:d5:70:1e:c6:cb:fe:bf:06:ce:7b:1e:4c:bb:b9:bc: 08:ed:23:52:01:2f:53:cb:9f:6c:cc:08:82:28:73:0b:0c:50: 9f:0a:17:a8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX1BUCDtpuamz20Yv1/rKtuQUX48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTEwMjAwNDQ1MTZaFw0yNTEwMjEwNTUwMTZaMDMxMTAvBgNV BAMTKEY2ODhDRjU1MDM5NkZFRkFFNDI5MUYxMTgwMUQ2RTYzMjAxMkU2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcbiLsX8z1JlAtkUCLu1Pr2u5 Lffj2YbzyXyFu2963f8Fte7xnoLIOm8FLcOmbplEB/Pd02egRfJtzh1nMx+KsTUw TCNXWyICw/qmBx07sGMRbMfBQ/NLPfSoxjxBqWLuB8XCjWWgQBwWa+s6kliXEfgL BklKT7yBIvdAu4Po6wQD5TSffVEC69LyfjJ9+K87R7vMxzmraY1VT6Z9x7dPEbtZ eIXA35adHyNtnbwU7NPMX3PMXoUfJkizSqDarb89qYTsYWGGBrH5vaoSYgIm582K iGpHke1eB81VtuSbwJ3p8fgl91Msc7v2OStqACJMjhjQ5G6EB945tI5USElNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9ojPVQOW/vrkKR8RgB1uYyAS5p8wHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4R+Te kGNT1ruidIpsuLJM4xpiynJHyZDrSVa3z6slef1yKYmRZao6Z9IaNvUg7zF1EEum a0Pu9U/D1VQfs0CADalNc1fgaMLl88hxhrYgzinCHp/oRa+TloBK51C6UnLAkYlI H0rbD0cwZTSdErOrS8RmKImQ2+SvP8LVQhBs2emJ5qPdMMHgf7CmRgxkaHrLNjI4 12zZx8bUG1wGsVFN/ci3HudlMLDgqme/4Novy8Mh/XwbmotzQtzKMJ+K7DGS/iv1 9yvqJLym2Tp92Zns3rf8GmRpawUmWtXVcB7Gy/6/Bs57Hky7ubwI7SNSAS9Ty59s zAiCKHMLDFCfCheo -----END CERTIFICATE-----Generated at Mon Oct 20 17:07:28 2025 by rpki-client